On Wednesday, December 30, 2015 at 9:25:01 PM UTC, Torsten Rüger wrote: > Thanks Fred, > > > strange to think there should be an error that can't be handled in rails. > Still, thanks for the answer, which i am unfortunately not sure i understand.
You could also handle via a rack middleware or by supplying a custom exception app (see http://guides.rubyonrails.org/configuring.html#rails-general-configuration) > > > Are you saying i should have a > <Limit CONNECT> > > > </Limit> > Not sure - never done this, but this seems to be the mechanism Apache provides for filtering requests based on http method. Fred > On Tuesday, 29 December 2015 21:29:00 UTC+2, Frederick Cheung wrote:On > Tuesday, December 29, 2015 at 6:13:52 PM UTC, Torsten Rüger wrote: > > > Hi, > > > > > > > > > i've been getting the subject error for some while in production. > > > I've tried to find out what that connect even means with little avail. > > > But i was generally surprised how much hacking attempts are being made, so > > i'm pretty sure it's ill intent. > > > > CONNECT is an http method used for proxies to allow tunnelling arbitrary > traffic through a proxy: basically someone has been scanning for > misconfigured proxies (and probably other stuff too). Just a fact of life > really. > > > > > > > > > Just, i can't seems to get rid of the error. I tried to add rescue_from to > > my ApplicationController, as in: > > > > > > > > > > > > rescue_from ActionController::RoutingError, with: :error_404 > > > > > > > > > > This type of routing error can't be rescued like that since rails doesn't > know which controller should be used. If it bothers you then you could try > blocking it at the webserver level (eg > https://httpd.apache.org/docs/2.4/mod/core.html#limit) > > > > Fred > > > > > but that doesn't do it. The call goes from phusion through rack and rails, > > and ends in > > > actionpack-4.2.5/lib/action_dispatch/middleware/debug_exceptions.rb:21:in > > `call' > > > > > > > > > > > > Has anyone encountered this in the wild ? > > > > > > > > > Torsten -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/rubyonrails-talk/9420ff91-711f-47a8-a958-6b8bf373eb8f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
